require_once( "common.inc" ); // °øÅë ÇÔ¼ö ¸ðÀ½
require_once( "db_pgsql.inc" ); // µ¥ÀÌÅͺ£À̽º ÀÎÅÍÆäÀ̽º
$uid = isset($_POST['uid']) ? $_POST['uid'] : NULL;
$upw = isset($_POST['upw']) ? $_POST['upw'] : NULL;
$saveid = isset($_POST['saveid']) ? $_POST['saveid'] : NULL;
$userid = addslashes(trim(strtolower("$uid")));
$userpw = addslashes(trim("$upw"));
$objConn = new DB_Sql;
// md5()
$userpw_md5 = md5($userpw);
$sql = " SELECT sp_user_id, sp_user_password ";
$sql .= " FROM t_sp_user ";
$sql .= " WHERE sp_user_id = '$userid' AND sp_user_password = '$userpw_md5' ";
$stmt = $objConn->query($sql);
$saveid = "1";
$super_uid = NULL;
if ($objConn->nf() != 0)
{
$objConn->next_record();
$super_uid = $objConn->f(0);
}
if ( $super_uid )
{
/*ÄíŰ ¼³Á¤*/
if( $saveid == "1")
{
SetCookie("odid", $userid, time()+3600*24*30, "/");
SetCookie("idsave", "1", time()+3600*24*30, "/");
} else
{
SetCookie("odid", "", time()+3600*24*30, "/");
SetCookie("idsave", "0", time()+3600*24*30, "/");
}
if( $ssl == "1")
{
SetCookie("odssl", $ssl, time()+3600*24*30, "/");
$PT = "https://";
} else
{
SetCookie("odssl", "", time()+3600*24*30, "/");
$PT = "http://";
}
SetCookie("UID", $userid, 0, "/");
$transferURL = "../raid_stat.html";
printf("");
} else //ÀÎÁõ ½ÇÆÐ
{
loginError();
}
function loginError()
{
printf(" \n");
die;
}
?>